Government Information Security Podcast

By GovInfoSecurity.com

What's Government Information Security Podcast about?

Exclusive, insightful audio interviews by our staff with government/security leading practitioners and thought-leaders. Transcripts are also available on our site!

Download our free app to listen on your phone

Government Information Security Podcast episodes:

04.24.2024
Major Areas of Cybersecurity Focus for Medical Device Makers
Medical device makers submitting products for premarket approval by the Food and Drug Administration often struggle the most with cybersecurity in three major areas - design controls, providing a software bill of materials and testing, according to Nastassia Tamari of...
04.22.2024
Benefits of a Unified CNAPP and XDR Platform
In this episode of the "Cybersecurity Insights" podcast, Uptycs CEO Ganesh Pai discusses unifying XDR and CNAPP to improve visibility and explains the coming shift from behavioral detection to outlier or anomaly detection, which uses sophisticated ML and AI.
04.18.2024
Why Health Firms Struggle With Cybersecurity Frameworks
Healthcare sector organizations often still struggle to implement security frameworks effectively, often not fully understanding the requirements or failing to integrate them into their overall cybersecurity strategy, said Keith Forrester of security firm Optiv, who offers tips to help.
04.09.2024
Evolving Threats Facing Robotic and Other Medical Gear
Robotic medical devices, such as surgical gear, offer great potential to improve patient care, but the cyber risks associated with these products must be carefully addressed, said Kevin Fu, director of the Archimedes Center for Health Care and Medical Device...
04.05.2024
Medical Device Cyberthreat Modeling: Top Considerations
Besides not doing cyberthreat modeling at all, some the biggest mistakes medical device manufacturers can make are starting the modeling process too late in the development phase or using it simply as a "paper weight exercise," said threat modeling expert...
04.01.2024
How 'Security by Default' Boosts Health Sector Cybersecurity
Healthcare entities can easily achieve many of the cyber performance goals set by regulators if they deploy technology solutions that provide robust security by default and create an organizational culture in which security-mindedness is ingrained, said Taylor Lehmann of Google...
04.01.2024
How the NIST CSF 2.0 Can Help Healthcare Sector Firms
The National Institute of Standards and Technology's updated Cybersecurity Framework 2.0 can help healthcare organizations better formalize their governance functions to enhance their cybersecurity posture and resilience, said Robert Booker, chief strategy officer at HITRUST.
03.29.2024
Is It Generative AI's Fault, or Do We Blame Human Beings?
AI is on the way to embedding itself in our daily lives. CISO Sam Curry and his brother, CMO Red Curry, discuss what generative AI means for copyrights and plagiarism, the "AI bubble," and whether governing AI-derived speech will wind...
03.18.2024
Safeguarding Critical OT and IoT Gear Used in Healthcare
The many kinds of OT and IoT gear that are not regulated medical devices but are critical to run hospitals and other care facilities present a variety of cybersecurity and patient safety concerns, said Dr. Benoit Desjardins, professor of radiology...
03.15.2024
Transforming a Cyber Program in the Aftermath of an Attack
In the aftermath of a ransomware attack several years ago, Hackensack Meridian Health embarked on transforming its cybersecurity program with the support of top leadership and increased funding and staff and by implementing critical security tools and best practices, said...
03.15.2024
Protecting Medical Devices Against Future Cyberthreats
Healthcare organizations and makers of medical devices need to think about how to safeguard their critical medical gear against future cyberthreats, including the looming dangers posed by quantum computing, said Mike Nelson, global vice president of digital trust at security...
03.14.2024
Properly Vetting AI Before It's Deployed in Healthcare
The U.S. healthcare sector needs to closely watch government regulatory and legislative developments involving artificial intelligence, including the European Union AI Act, said Lee Kim, senior principal of cybersecurity and privacy at the Healthcare Information and Management Systems Society.
03.14.2024
Planning for Healthcare IT Resiliency on a Regional Basis
It's critical for hospitals and other firms to not only prepare for how they will respond to a cyberattack but also to consider the regional impact if a neighboring provider of services needed in the community is disrupted by a...
03.14.2024
Why HHS' Cybersecurity Goals Aren't Necessarily Voluntary
Healthcare sector organizations need to focus their attention on meeting the "voluntary" essential and enhanced cybersecurity performance goals set out by federal regulators before they become potential mandates, said Kate Pierce, virtual information security officer at Fortified Heath Security.
03.13.2024
The Concentrated Cyber Risk Posed by Enormous Vendors
The vast healthcare ecosystem disruption caused by the recent attack on Change Healthcare, which affected more than 100 of the company's IT products and services, underscores the concentrated cyber risk when a major vendor suffers a serious cyber incident, said...
03.12.2024
Building a 911 Cyber Civil Defense System for Healthcare
The healthcare sector needs a 911-style cyber civil defense system that can help all segments of the industry, including under-resourced groups, to more rapidly and effectively respond to cyberattacks and related incidents, said Erik Decker, CISO of Intermountain Health and...
03.12.2024
HHS Resources, Funding to Bolster Healthcare Cyber Efforts
The Department of Health and Human Services is working on grant programs and other financial programs to help under-resourced healthcare organizations deal with the cybersecurity challenges they're facing, said La Monte Yarborough, CISO and acting deputy CIO at HHS.
03.11.2024
Importance of Resilience in Mitigating Supply Chain Attacks
The Change Healthcare attack is already providing valuable lessons to healthcare firms - mostly about the importance of resilience, especially when it comes the industry's supply chain and third parties, said Nitin Natarajan, deputy director of the Cybersecurity and...
03.05.2024
How NOT to Lead
Leaders in cybersecurity - and in any other business - need to keep a bank account filled with the trust and respect of their employees and make sure that account stays in the black, said Chase Cunningham, aka the Doctor...
03.01.2024
The Widespread Effect of the Change Healthcare Mega Hack
The Change Healthcare mega hack has taken nearly 120 of the company's IT products and services offline since Feb. 21, and that cyber disruption is having serious, widespread impact on the entire healthcare industry including major players, said attorney Sara...
02.29.2024
Your Supply Chain Is Your New Attack Surface
Your supply chain is your new attack surface, according to Galit Lubetzky Sharon, the co-founder and CEO of Wing Security. She discusses Wing's solution - Secure SaaS Posture Management, or SSPM - that helps organizations ensure that all of their...
02.23.2024
Why OT Security Keeps Some Healthcare Leaders Up at Night
It's not just medical device cybersecurity that's keeping some healthcare security leaders up at night - it's also the risks posed by other critical connected gear that patients and clinicians depend upon, said Ali Youssef, director of medical device and...
02.16.2024
Cyberwar: What Is It Good For?
CISO Sam Curry and CMO Red Curry discuss the chaos and disruption of cyberwar and how attacks on critical infrastructure can tactically help attackers in combat, demoralize the general population and affect critical capabilities at just the right point in...
02.07.2024
Bolstering Healthcare Cybersecurity: The Regulatory Outlook
The Biden administration's strategy for bolstering health sector cybersecurity, which includes newly released voluntary cyber performance goals and plans to update the HIPAA Security Rule, is fueling uncertainty in some organizations, said privacy attorney Iliana Peters of law firm Polsinelli.
02.06.2024
How to Win a Cyberwar: Use a Combined Intelligence Strategy
In times of conflict, such as the Israel-Hamas war, intelligence becomes even more important than it is in peacetime. Red Curry, chief marketing officer at Tautuk, and his brother, Sam Curry, CISO at Zscaler, discuss the need for a combined...
01.31.2024
Pushing the Healthcare Sector to Improve Cybersecurity
Getting the health sector to vastly improve the state of its cybersecurity will take much more than the recent issuance of federal guidance outlining cyber performance goals for entities. It will also require new government incentives and mandates, said Steve...
01.25.2024
Resilience: The New Priority for Your Security Model
Security leaders focus on protection and detection, but the new priority is resilience. A resilience strategy should "get the real 'ground truth' of what has happened" in the attack, said Brian Dye, CEO of Corelight, in this episode of "Cybersecurity...
01.17.2024
How a Novel Legal Maneuver Got a Hospital's Stolen Data Back
The ubiquity and anonymity of cryptocurrencies are fueling economic, legal and ethical challenges that put healthcare entities in the crosshairs of cybercriminals, said David Hoffman, general counsel of Claxton-Hepburn Medical Center, which recently filed a lawsuit against ransomware gang LockBit.
01.16.2024
XDR and the Benefits of Managed Services
Extended Detection and Response (XDR) has evolved significantly over the past few years, becoming more critical than ever for organizations in need of enhanced capabilities. But so, too, have the accompanying managed services evolved. Port53 Technologies President Omar Zarabi explains.
01.11.2024
How the Merck Case Shapes the Future of Cyber Insurance
Merck & Co.'s proposed settlement with insurers over a $1.4 billion claim related to the NotPetya attack will change the language the insurance industry uses to exclude acts of war in its policies, and organizations need to consider how those...
01.03.2024
Large Language Models: Moving Past the Early Stage
AI, machine learning and large language models are not new, but they are coming to fruition with the mass adoption of generative AI. For cybersecurity professionals, these are "exciting times we live in," said Dan Grosu, CTO and CISO at...
01.01.2024
Top Considerations for Complying With My Health My Data Act
It's time for companies dealing with non-HIPAA-regulated health information to plan their compliance with Washington state's My Health My Data Act, which goes into effect in the new year and affects organizations that are based in other states, said attorney...
12.29.2023
How One University Is Beefing Up Cyber Defenses, Programs
Educational institutions are prime targets for ransomware and other cyberattacks due to their open nature and troves of sensitive data, requiring continuous investment in cyber defenses and strong security practices, said Steve Zuromski, CIO at Bridgewater State University in Massachusetts.
12.26.2023
Fighting AI-Fueled Attacks With AI-Based Cyber Tools
Healthcare CISOs must recognize the real and imminent threat of AI-fueled cyberattacks and take proactive steps, including the deployment of AI-based security tools, to protect patient data and critical healthcare services, said Troy Hawes, managing director at consulting firm Moss...
12.26.2023
The Critical Need for Human Oversight in Healthcare AI
AI holds great promise for automating and improving many healthcare processes and tasks - including clinical decision support - but if some users become overly dependent on these systems, that could be potentially detrimental to patients, says attorney Lee Kim...
12.25.2023
Domain Name Security Challenges
Protecting domain name systems finally has the attention of cybersecurity professionals -because every recent large data breach has involved a DNS vulnerability. But there is much work to be done. According to Ihab Shraim, chief technical officer at Corporation Services...
12.22.2023
Buckling Down on Vendor Security Risk in Healthcare
With the surge in major cyber incidents involving third-party suppliers, it's critical for healthcare sector entities to raise their security expectations and tighten their requirements for vendors handling sensitive data, said Renee Broadbent, CIO of Southern New England Healthcare.
12.08.2023
How a CEO Runs a Company in Wartime
Yossi Appleboum, CEO of Sepio Systems in Israel, discusses the international support for Israel in the Israel-Hamas war and what his employees are doing to support the war effort, how the war is affecting Sepio Systems' performance and how generative...
12.07.2023
Israel-Hamas War: 'We All Know Someone That Lost Someone'
After the latest Israel-Hamas war began, Kollender found herself trying to return to her homeland, but "no airline was flying to or from Israel," she said. In this episode of CyberEd.io's podcast series "Cybersecurity Insights," she discussed her personal views...
12.06.2023
Supporting CISA - The 'Focal Point of Our Defensive Efforts'
On Nov. 8, Tenable Chairman and CEO Amit Yoran wrote a letter to Congress in support of CISA. In this episode of "Cybersecurity Insights," Yoran calls the agency the "primary focal point of our defensive efforts" and discusses why the...
12.05.2023
Mapping the Unseen Vulnerabilities of Zombie APIs
Zombie APIs are becoming more common, just because of the sheer number APIs and third-party vendors that organizations rely on. Joshua Scott, head of information security and IT at API platform Postman, says businesses need to identify "what is critical...
11.30.2023
Good Governance: 'It's All Hygiene'
In the constant struggle to manage the other five pillars - identify, protect, detect, respond and recover - security leaders often do not have governance at top of mind, said Netography CEO Martin Roesch, but he added, "Good governance is...
11.29.2023
Stopping Cloud Workload Attacks
In this episode of "Cybersecurity Insights," Eyal Fisher discussed Sweet Security's Cloud Runtime Security Suite, which helps CISOS and security teams defend against all stages of a cyberattack by gathering data, generating insights, baselining the normal environment and looking for...
11.28.2023
Mapping Access - and Attack - Paths in Active Directory
A directory service should be a "source of truth," said Justin Kohler, vice president of products at Spector Ops. But when users are overprivileged or misconfigurations occur, that creates attack hubs. Kohler discusses BloodHound, a solution he says is like...
11.27.2023
How Biden's AI Executive Order Will Affect Healthcare
President Joe Biden's recent executive order for artificial intelligence encourages investment in AI while setting a vision for a regulatory framework to address issues involving AI technology safety, bias and other concerns in healthcare, said attorney Wendell Bartnick of the...
11.24.2023
Getting a Tighter Grip on Vendor Security Risk in Healthcare
Despite the high frequency of major health data breaches involving vendors, many healthcare sector entities remain lax in their approach to manage and reduce third-party security risk, said Glen Braden, CIO and principal of compliance auditing firm Attest Health Care...
11.23.2023
Why Hospitals Should Beware of Malicious AI Use
AI is being used "by everyone" these days, including by malicious nation-state actors, and that is raising the level of threats and risks facing hospitals and other healthcare entities, said John Riggi, national adviser for cybersecurity and risk at the...
11.22.2023
AI in Healthcare: The Growing Promise - and Potential Risks
Exciting advancements in medicine through the use of AI are already happening, and many more are in the pipeline. But they need to be approached carefully and vetted properly for risk, said Dr. Eric Liederman, medical informatics and national privacy...
11.16.2023
How State Governments Can Regulate AI and Protect Privacy
Regulating AI is "like regulating Jell-O," said Massachusetts risk counsel Jenny Hedderman, but states are looking at regulating "areas of harm" rather than AI as a whole. In this episode of "Cybersecurity Insights," Hedderman discusses privacy, third-party vendor risk, and...
11.13.2023
Joe Sullivan on What CISOs Need to Know About the Uber Trial
In this episode of CyberEd.io's podcast series "Cybersecurity Insights," former Uber CSO Joe Sullivan discusses the Uber trial and offers guidance to future CISOs. Was the Uber case a data breach or not. Sullivan explained why that making that distinction...

What's Government Information Security Podcast about?

Download our free app to listen on your phone

Government Information Security Podcast episodes:

Major Areas of Cybersecurity Focus for Medical Device Makers

Benefits of a Unified CNAPP and XDR Platform

Why Health Firms Struggle With Cybersecurity Frameworks

Evolving Threats Facing Robotic and Other Medical Gear

Medical Device Cyberthreat Modeling: Top Considerations

How 'Security by Default' Boosts Health Sector Cybersecurity

How the NIST CSF 2.0 Can Help Healthcare Sector Firms

Is It Generative AI's Fault, or Do We Blame Human Beings?

Safeguarding Critical OT and IoT Gear Used in Healthcare

Transforming a Cyber Program in the Aftermath of an Attack

Protecting Medical Devices Against Future Cyberthreats

Properly Vetting AI Before It's Deployed in Healthcare

Planning for Healthcare IT Resiliency on a Regional Basis

Why HHS' Cybersecurity Goals Aren't Necessarily Voluntary

The Concentrated Cyber Risk Posed by Enormous Vendors

Building a 911 Cyber Civil Defense System for Healthcare

HHS Resources, Funding to Bolster Healthcare Cyber Efforts

Importance of Resilience in Mitigating Supply Chain Attacks

How NOT to Lead

The Widespread Effect of the Change Healthcare Mega Hack

Your Supply Chain Is Your New Attack Surface

Why OT Security Keeps Some Healthcare Leaders Up at Night

Cyberwar: What Is It Good For?

Bolstering Healthcare Cybersecurity: The Regulatory Outlook

How to Win a Cyberwar: Use a Combined Intelligence Strategy

Pushing the Healthcare Sector to Improve Cybersecurity

Resilience: The New Priority for Your Security Model

How a Novel Legal Maneuver Got a Hospital's Stolen Data Back

XDR and the Benefits of Managed Services

How the Merck Case Shapes the Future of Cyber Insurance

Large Language Models: Moving Past the Early Stage

Top Considerations for Complying With My Health My Data Act

How One University Is Beefing Up Cyber Defenses, Programs

Fighting AI-Fueled Attacks With AI-Based Cyber Tools

The Critical Need for Human Oversight in Healthcare AI

Domain Name Security Challenges

Buckling Down on Vendor Security Risk in Healthcare

How a CEO Runs a Company in Wartime

Israel-Hamas War: 'We All Know Someone That Lost Someone'

Supporting CISA - The 'Focal Point of Our Defensive Efforts'

Mapping the Unseen Vulnerabilities of Zombie APIs

Good Governance: 'It's All Hygiene'

Stopping Cloud Workload Attacks

Mapping Access - and Attack - Paths in Active Directory

How Biden's AI Executive Order Will Affect Healthcare

Getting a Tighter Grip on Vendor Security Risk in Healthcare

Why Hospitals Should Beware of Malicious AI Use

AI in Healthcare: The Growing Promise - and Potential Risks

How State Governments Can Regulate AI and Protect Privacy

Joe Sullivan on What CISOs Need to Know About the Uber Trial